Strange Browsing Problem

[scaryjeff]

Hi

I'm using Firefox and IE, they both have the exact same problem. A few websites stopped working, including gmail (shows loading screen forever), and HardOCP (black screen, browser says 'done'). I thought I would check the page had actually downloaded by going to view > source, and it seems as if the pages are being downloaded properly. However, I just realised that every page I go on (hotmail, this page, my own page that definately doesn't have any java in it) has the attached java at the start of it.

I keep windows up to date (running 2K), AVG is up to date and finds nothing, and Adaware is up to date and finds nothing. I really don't know what to make of this, but I have a bad feeling

For some reason it won't let me put a codebox in get a message "A potentially dangerous Request.Form value was detected from the client", so the code is here.

 

[scaryjeff]

I hate doing this, but

*bump*

Any suggestions or ideas would really be appreciated. I tried reinstalling FireFox, and reinstalling J2RE, but neither of these things made a difference. An obvious solution might be to reinstall windows, but I don't want to do that without knowing what the problem I'm having is...

 

[Malak]

Try this

 

[scaryjeff]

OK, I just installed Opera, and I'm having the exact same problem. The same code is put at the top of every page I go on, and the websites that don't work at all with IE or FireFox still don't work

Also, I just realised it's putting this code at the bottom of every page as well:

<SCRIPT LANGUAGE="JavaScript">
<!--
if(document.layers){document.captureEvents(Event.MOUSEUP);}
document.onmouseup=RecordMUpTime;
//-->
</script>

 

[Malak]

Check for virii, spyware, etc.

 

[scaryjeff]

I've got an up to date AVG, which finds nothing, and the Trend Housecall finds nothing. Adaware and Spybot are both up to date and both find nothing but the odd 'tracker cookie'.

Since the code seems to be to do with the mouse, I tried changing the mouse driver from the microsoft one to just 'HID compliant mouse', and this didn't make any difference...

Thanks for the ideas though

 

[TheLogLady]

Does your internet service go through a proxy?

Are you using Zone Alarm Pro? Or any other software with pop-up blocking functionality?

What firewall are you using?

Other ideas:
Open up task manager and find out what processes are running.

Also, make task manager always on top (options >> always on top). Then sort the processes by CPU usage, descending. Open up your browser and navigate to a site, keeping task manager visible. Observe which processes pop up to the top of the process list in task manager (other than your browser executable).

You might also try running BHO Demon and see if it finds anything.

Also, try entering "netstat -a" from a command window and see if there are any suspicious connections listed.

It's nothing to do with your mouse or your mouse driver. The javascript is measuring the interval between your mouseclicks within web pages.

 

[scaryjeff]

Well, I tried yet another spyware program ('spy sweeper'), and it turns out I had 'cdilla' which is apparently by macrovision. I removed that, and my problem is fixed.

I don't understand why neither adaware or spybot found this, or why cdilla would want to add some javascript that breaks a few websites?

Thanks for the help though, really happy to have this resolved.